XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows an unauthenticated attacker to read local files on the server via a crafted SVG image with a nested embedded SVG, when the image is processed or exported to PDF.

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• docs.telerik.com/…-xml-external-entity-reference-cve-2026-118039 Üretici bülteni

Kayıt geçmişi

1. 28 Eki 2026 15:29Yayımlandı

İlgili açıklar

• 7,5 CVE-2026-118037Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing
• 7,5 CVE-2026-118036Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering
• 7,5 CVE-2026-118035Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing
• 7,5 CVE-2026-118040Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing
• 7,1 CVE-2026-118038Path Traversal in Telerik Document Processing Libraries AI Agent Tools
• 8,3 CVE-2026-112198Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App